restore atheme to a working state, added stunnel in absence of tls support in atheme
This commit is contained in:
parent
24fd350b47
commit
757ee1e161
15
Dockerfile
15
Dockerfile
@ -1,10 +1,12 @@
|
|||||||
FROM ubuntu:latest
|
ARG UBUNTU_VERSION="noble"
|
||||||
|
|
||||||
|
FROM ubuntu:${UBUNTU_VERSION}
|
||||||
|
|
||||||
ARG BUILD_SERVER_NAME="services.lame-network.local"
|
ARG BUILD_SERVER_NAME="services.lame-network.local"
|
||||||
|
|
||||||
RUN apt -y update
|
RUN apt -y update
|
||||||
|
|
||||||
RUN apt -y install coreutils perl git automake autoconf build-essential libpcre2-dev rapidjson-dev libcurl4-gnutls-dev libargon2-dev libmaxminddb-dev libldap2-dev rapidjson-dev libmysqlclient-dev libmysqlclient-dev default-libmysqlclient-dev libpq-dev libre2-dev gnutls-dev libsqlite3-dev libmbedtls-dev libqrencode-dev libpcre3-dev libtre-dev pkg-config libwww-perl libidn-dev libpasswdqc-dev libcrack2-dev libperl-dev libsodium-dev cracklib-runtime libcrypt-cracklib-perl sendmail
|
RUN apt -y install coreutils perl git automake autoconf build-essential libpcre2-dev rapidjson-dev libcurl4-gnutls-dev libargon2-dev libmaxminddb-dev libldap2-dev rapidjson-dev libmysqlclient-dev libmysqlclient-dev default-libmysqlclient-dev libpq-dev libre2-dev gnutls-dev libsqlite3-dev libmbedtls-dev libqrencode-dev libpcre3-dev libtre-dev pkg-config libwww-perl libidn-dev libpasswdqc-dev libcrack2-dev libperl-dev libsodium-dev cracklib-runtime libcrypt-cracklib-perl sendmail gettext
|
||||||
|
|
||||||
RUN groupadd atheme
|
RUN groupadd atheme
|
||||||
|
|
||||||
@ -12,7 +14,7 @@ RUN useradd --system --shell /bin/bash atheme -g atheme
|
|||||||
|
|
||||||
WORKDIR /tmp
|
WORKDIR /tmp
|
||||||
|
|
||||||
RUN git clone https://github.com/paigeadelethompson/atheme.git -b inspircd
|
RUN git clone https://github.com/atheme/atheme.git -b master
|
||||||
|
|
||||||
WORKDIR /tmp/atheme
|
WORKDIR /tmp/atheme
|
||||||
|
|
||||||
@ -34,13 +36,6 @@ ADD atheme.conf /etc/atheme
|
|||||||
|
|
||||||
ADD include.default.conf /etc/atheme/include.conf
|
ADD include.default.conf /etc/atheme/include.conf
|
||||||
|
|
||||||
RUN openssl genrsa -out /etc/ssl/atheme/server.key
|
|
||||||
|
|
||||||
RUN openssl req -new -key /etc/ssl/atheme/server.key -out /etc/ssl/atheme/server.csr \
|
|
||||||
-subj "/C=US/ST=Washington/L=Seattle/O=LameNetwork/OU=IT Department/CN=$BUILD_SERVER_NAME"
|
|
||||||
|
|
||||||
RUN openssl x509 -req -days 365 -in /etc/ssl/atheme/server.csr -signkey /etc/ssl/atheme/server.key -out /etc/ssl/atheme/server.crt
|
|
||||||
|
|
||||||
RUN chown -R atheme:atheme /etc/atheme /etc/ssl/atheme /var/log/atheme
|
RUN chown -R atheme:atheme /etc/atheme /etc/ssl/atheme /var/log/atheme
|
||||||
|
|
||||||
WORKDIR /
|
WORKDIR /
|
||||||
|
588
atheme.conf
588
atheme.conf
@ -1,264 +1,264 @@
|
|||||||
include "/etc/atheme/include.conf";
|
loadmodule "/usr/local/modules/protocol/inspircd";
|
||||||
|
include "/usr/local/etc/include.conf";
|
||||||
|
|
||||||
#loadmodule "security/cmdperm";
|
#loadmodule "/usr/local/modules/security/cmdperm";
|
||||||
loadmodule "protocol/inspircd";
|
#loadmodule "/usr/local/modules/protocol/mixin_nohalfops";
|
||||||
#loadmodule "protocol/mixin_nohalfops";
|
#loadmodule "/usr/local/modules/protocol/mixin_noholdnick";
|
||||||
#loadmodule "protocol/mixin_noholdnick";
|
#loadmodule "/usr/local/modules/protocol/mixin_noprotect";
|
||||||
#loadmodule "protocol/mixin_noprotect";
|
#loadmodule "/usr/local/modules/protocol/mixin_noowner";
|
||||||
#loadmodule "protocol/mixin_noowner";
|
loadmodule "/usr/local/modules/backend/opensex";
|
||||||
loadmodule "backend/opensex";
|
#loadmodule "/usr/local/modules/crypto/argon2";
|
||||||
#loadmodule "crypto/argon2";
|
#loadmodule "/usr/local/modules/crypto/scrypt";
|
||||||
#loadmodule "crypto/scrypt";
|
#loadmodule "/usr/local/modules/crypto/pbkdf2v2";
|
||||||
#loadmodule "crypto/pbkdf2v2";
|
#loadmodule "/usr/local/modules/crypto/bcrypt";
|
||||||
#loadmodule "crypto/bcrypt";
|
#loadmodule "/usr/local/modules/crypto/pbkdf2";
|
||||||
#loadmodule "crypto/pbkdf2";
|
#loadmodule "/usr/local/modules/crypto/crypt3-sha2-512";
|
||||||
#loadmodule "crypto/crypt3-sha2-512";
|
#loadmodule "/usr/local/modules/crypto/crypt3-sha2-256";
|
||||||
#loadmodule "crypto/crypt3-sha2-256";
|
#loadmodule "/usr/local/modules/crypto/crypt3-md5";
|
||||||
#loadmodule "crypto/crypt3-md5";
|
#loadmodule "/usr/local/modules/crypto/rawsha2-512";
|
||||||
#loadmodule "crypto/rawsha2-512";
|
#loadmodule "/usr/local/modules/crypto/rawsha2-256";
|
||||||
#loadmodule "crypto/rawsha2-256";
|
#loadmodule "/usr/local/modules/crypto/anope-enc-sha256";
|
||||||
#loadmodule "crypto/anope-enc-sha256";
|
#loadmodule "/usr/local/modules/crypto/rawsha1";
|
||||||
#loadmodule "crypto/rawsha1";
|
#loadmodule "/usr/local/modules/crypto/rawmd5";
|
||||||
#loadmodule "crypto/rawmd5";
|
#loadmodule "/usr/local/modules/crypto/ircservices";
|
||||||
#loadmodule "crypto/ircservices";
|
#loadmodule "/usr/local/modules/crypto/crypt3-des";
|
||||||
#loadmodule "crypto/crypt3-des";
|
#loadmodule "/usr/local/modules/crypto/base64";
|
||||||
#loadmodule "crypto/base64";
|
#loadmodule "/usr/local/modules/auth/ldap";
|
||||||
#loadmodule "auth/ldap";
|
loadmodule "/usr/local/modules/nickserv/main";
|
||||||
loadmodule "nickserv/main";
|
#loadmodule "/usr/local/modules/nickserv/access";
|
||||||
#loadmodule "nickserv/access";
|
loadmodule "/usr/local/modules/nickserv/badmail";
|
||||||
loadmodule "nickserv/badmail";
|
loadmodule "/usr/local/modules/nickserv/cert";
|
||||||
loadmodule "nickserv/cert";
|
loadmodule "/usr/local/modules/nickserv/drop";
|
||||||
loadmodule "nickserv/drop";
|
loadmodule "/usr/local/modules/nickserv/enforce";
|
||||||
loadmodule "nickserv/enforce";
|
loadmodule "/usr/local/modules/nickserv/ghost";
|
||||||
loadmodule "nickserv/ghost";
|
loadmodule "/usr/local/modules/nickserv/group";
|
||||||
loadmodule "nickserv/group";
|
loadmodule "/usr/local/modules/nickserv/help";
|
||||||
loadmodule "nickserv/help";
|
loadmodule "/usr/local/modules/nickserv/hold";
|
||||||
loadmodule "nickserv/hold";
|
loadmodule "/usr/local/modules/nickserv/identify";
|
||||||
loadmodule "nickserv/identify";
|
loadmodule "/usr/local/modules/nickserv/info";
|
||||||
loadmodule "nickserv/info";
|
loadmodule "/usr/local/modules/nickserv/info_lastquit";
|
||||||
loadmodule "nickserv/info_lastquit";
|
loadmodule "/usr/local/modules/nickserv/list";
|
||||||
loadmodule "nickserv/list";
|
loadmodule "/usr/local/modules/nickserv/listlogins";
|
||||||
loadmodule "nickserv/listlogins";
|
loadmodule "/usr/local/modules/nickserv/listmail";
|
||||||
loadmodule "nickserv/listmail";
|
loadmodule "/usr/local/modules/nickserv/listownmail";
|
||||||
loadmodule "nickserv/listownmail";
|
loadmodule "/usr/local/modules/nickserv/login";
|
||||||
loadmodule "nickserv/login";
|
loadmodule "/usr/local/modules/nickserv/loginnolimit";
|
||||||
loadmodule "nickserv/loginnolimit";
|
loadmodule "/usr/local/modules/nickserv/logout";
|
||||||
loadmodule "nickserv/logout";
|
loadmodule "/usr/local/modules/nickserv/mark";
|
||||||
loadmodule "nickserv/mark";
|
loadmodule "/usr/local/modules/nickserv/pwquality";
|
||||||
loadmodule "nickserv/pwquality";
|
loadmodule "/usr/local/modules/nickserv/freeze";
|
||||||
loadmodule "nickserv/freeze";
|
loadmodule "/usr/local/modules/nickserv/listchans";
|
||||||
loadmodule "nickserv/listchans";
|
loadmodule "/usr/local/modules/nickserv/listgroups";
|
||||||
loadmodule "nickserv/listgroups";
|
loadmodule "/usr/local/modules/nickserv/register";
|
||||||
loadmodule "nickserv/register";
|
loadmodule "/usr/local/modules/nickserv/regnolimit";
|
||||||
loadmodule "nickserv/regnolimit";
|
loadmodule "/usr/local/modules/nickserv/resetpass";
|
||||||
loadmodule "nickserv/resetpass";
|
loadmodule "/usr/local/modules/nickserv/restrict";
|
||||||
loadmodule "nickserv/restrict";
|
loadmodule "/usr/local/modules/nickserv/return";
|
||||||
loadmodule "nickserv/return";
|
loadmodule "/usr/local/modules/nickserv/setpass";
|
||||||
loadmodule "nickserv/setpass";
|
loadmodule "/usr/local/modules/nickserv/sendpass";
|
||||||
loadmodule "nickserv/sendpass";
|
loadmodule "/usr/local/modules/nickserv/sendpass_user";
|
||||||
loadmodule "nickserv/sendpass_user";
|
loadmodule "/usr/local/modules/nickserv/set_accountname";
|
||||||
loadmodule "nickserv/set_accountname";
|
loadmodule "/usr/local/modules/nickserv/set_badpasswdmsg";
|
||||||
loadmodule "nickserv/set_badpasswdmsg";
|
loadmodule "/usr/local/modules/nickserv/set_email";
|
||||||
loadmodule "nickserv/set_email";
|
loadmodule "/usr/local/modules/nickserv/set_emailmemos";
|
||||||
loadmodule "nickserv/set_emailmemos";
|
loadmodule "/usr/local/modules/nickserv/set_enforcetime";
|
||||||
loadmodule "nickserv/set_enforcetime";
|
loadmodule "/usr/local/modules/nickserv/set_hidemail";
|
||||||
loadmodule "nickserv/set_hidemail";
|
loadmodule "/usr/local/modules/nickserv/set_language";
|
||||||
loadmodule "nickserv/set_language";
|
loadmodule "/usr/local/modules/nickserv/set_nevergroup";
|
||||||
loadmodule "nickserv/set_nevergroup";
|
loadmodule "/usr/local/modules/nickserv/set_neverop";
|
||||||
loadmodule "nickserv/set_neverop";
|
loadmodule "/usr/local/modules/nickserv/set_nogreet";
|
||||||
loadmodule "nickserv/set_nogreet";
|
loadmodule "/usr/local/modules/nickserv/set_nomemo";
|
||||||
loadmodule "nickserv/set_nomemo";
|
loadmodule "/usr/local/modules/nickserv/set_noop";
|
||||||
loadmodule "nickserv/set_noop";
|
loadmodule "/usr/local/modules/nickserv/set_nopassword";
|
||||||
loadmodule "nickserv/set_nopassword";
|
loadmodule "/usr/local/modules/nickserv/set_password";
|
||||||
loadmodule "nickserv/set_password";
|
loadmodule "/usr/local/modules/nickserv/set_privmsg";
|
||||||
loadmodule "nickserv/set_privmsg";
|
loadmodule "/usr/local/modules/nickserv/set_private";
|
||||||
loadmodule "nickserv/set_private";
|
loadmodule "/usr/local/modules/nickserv/set_property";
|
||||||
loadmodule "nickserv/set_property";
|
loadmodule "/usr/local/modules/nickserv/set_pubkey";
|
||||||
loadmodule "nickserv/set_pubkey";
|
loadmodule "/usr/local/modules/nickserv/set_quietchg";
|
||||||
loadmodule "nickserv/set_quietchg";
|
loadmodule "/usr/local/modules/nickserv/status";
|
||||||
loadmodule "nickserv/status";
|
loadmodule "/usr/local/modules/nickserv/taxonomy";
|
||||||
loadmodule "nickserv/taxonomy";
|
loadmodule "/usr/local/modules/nickserv/vacation";
|
||||||
loadmodule "nickserv/vacation";
|
loadmodule "/usr/local/modules/nickserv/verify";
|
||||||
loadmodule "nickserv/verify";
|
loadmodule "/usr/local/modules/nickserv/vhost";
|
||||||
loadmodule "nickserv/vhost";
|
loadmodule "/usr/local/modules/nickserv/waitreg";
|
||||||
loadmodule "nickserv/waitreg";
|
loadmodule "/usr/local/modules/chanserv/main";
|
||||||
loadmodule "chanserv/main";
|
loadmodule "/usr/local/modules/chanserv/access";
|
||||||
loadmodule "chanserv/access";
|
loadmodule "/usr/local/modules/chanserv/akick";
|
||||||
loadmodule "chanserv/akick";
|
loadmodule "/usr/local/modules/chanserv/ban";
|
||||||
loadmodule "chanserv/ban";
|
loadmodule "/usr/local/modules/chanserv/unban_self";
|
||||||
loadmodule "chanserv/unban_self";
|
loadmodule "/usr/local/modules/chanserv/bansearch";
|
||||||
loadmodule "chanserv/bansearch";
|
loadmodule "/usr/local/modules/chanserv/clone";
|
||||||
loadmodule "chanserv/clone";
|
loadmodule "/usr/local/modules/chanserv/close";
|
||||||
loadmodule "chanserv/close";
|
loadmodule "/usr/local/modules/chanserv/clear";
|
||||||
loadmodule "chanserv/clear";
|
loadmodule "/usr/local/modules/chanserv/clear_akicks";
|
||||||
loadmodule "chanserv/clear_akicks";
|
loadmodule "/usr/local/modules/chanserv/clear_bans";
|
||||||
loadmodule "chanserv/clear_bans";
|
loadmodule "/usr/local/modules/chanserv/clear_flags";
|
||||||
loadmodule "chanserv/clear_flags";
|
loadmodule "/usr/local/modules/chanserv/clear_users";
|
||||||
loadmodule "chanserv/clear_users";
|
loadmodule "/usr/local/modules/chanserv/count";
|
||||||
loadmodule "chanserv/count";
|
loadmodule "/usr/local/modules/chanserv/drop";
|
||||||
loadmodule "chanserv/drop";
|
loadmodule "/usr/local/modules/chanserv/fflags";
|
||||||
loadmodule "chanserv/fflags";
|
loadmodule "/usr/local/modules/chanserv/flags";
|
||||||
loadmodule "chanserv/flags";
|
loadmodule "/usr/local/modules/chanserv/ftransfer";
|
||||||
loadmodule "chanserv/ftransfer";
|
loadmodule "/usr/local/modules/chanserv/getkey";
|
||||||
loadmodule "chanserv/getkey";
|
loadmodule "/usr/local/modules/chanserv/halfop";
|
||||||
loadmodule "chanserv/halfop";
|
loadmodule "/usr/local/modules/chanserv/help";
|
||||||
loadmodule "chanserv/help";
|
loadmodule "/usr/local/modules/chanserv/hold";
|
||||||
loadmodule "chanserv/hold";
|
loadmodule "/usr/local/modules/chanserv/info";
|
||||||
loadmodule "chanserv/info";
|
loadmodule "/usr/local/modules/chanserv/invite";
|
||||||
loadmodule "chanserv/invite";
|
loadmodule "/usr/local/modules/chanserv/kick";
|
||||||
loadmodule "chanserv/kick";
|
loadmodule "/usr/local/modules/chanserv/list";
|
||||||
loadmodule "chanserv/list";
|
loadmodule "/usr/local/modules/chanserv/mark";
|
||||||
loadmodule "chanserv/mark";
|
loadmodule "/usr/local/modules/chanserv/moderate";
|
||||||
loadmodule "chanserv/moderate";
|
loadmodule "/usr/local/modules/chanserv/op";
|
||||||
loadmodule "chanserv/op";
|
loadmodule "/usr/local/modules/chanserv/owner";
|
||||||
loadmodule "chanserv/owner";
|
loadmodule "/usr/local/modules/chanserv/protect";
|
||||||
loadmodule "chanserv/protect";
|
loadmodule "/usr/local/modules/chanserv/quiet";
|
||||||
loadmodule "chanserv/quiet";
|
loadmodule "/usr/local/modules/chanserv/recover";
|
||||||
loadmodule "chanserv/recover";
|
loadmodule "/usr/local/modules/chanserv/register";
|
||||||
loadmodule "chanserv/register";
|
loadmodule "/usr/local/modules/chanserv/set_email";
|
||||||
loadmodule "chanserv/set_email";
|
loadmodule "/usr/local/modules/chanserv/set_entrymsg";
|
||||||
loadmodule "chanserv/set_entrymsg";
|
loadmodule "/usr/local/modules/chanserv/set_fantasy";
|
||||||
loadmodule "chanserv/set_fantasy";
|
loadmodule "/usr/local/modules/chanserv/set_gameserv";
|
||||||
loadmodule "chanserv/set_gameserv";
|
loadmodule "/usr/local/modules/chanserv/set_guard";
|
||||||
loadmodule "chanserv/set_guard";
|
loadmodule "/usr/local/modules/chanserv/set_keeptopic";
|
||||||
loadmodule "chanserv/set_keeptopic";
|
loadmodule "/usr/local/modules/chanserv/set_limitflags";
|
||||||
loadmodule "chanserv/set_limitflags";
|
loadmodule "/usr/local/modules/chanserv/set_mlock";
|
||||||
loadmodule "chanserv/set_mlock";
|
loadmodule "/usr/local/modules/chanserv/set_prefix";
|
||||||
loadmodule "chanserv/set_prefix";
|
loadmodule "/usr/local/modules/chanserv/set_private";
|
||||||
loadmodule "chanserv/set_private";
|
loadmodule "/usr/local/modules/chanserv/set_property";
|
||||||
loadmodule "chanserv/set_property";
|
loadmodule "/usr/local/modules/chanserv/set_pubacl";
|
||||||
loadmodule "chanserv/set_pubacl";
|
loadmodule "/usr/local/modules/chanserv/set_restricted";
|
||||||
loadmodule "chanserv/set_restricted";
|
loadmodule "/usr/local/modules/chanserv/set_secure";
|
||||||
loadmodule "chanserv/set_secure";
|
loadmodule "/usr/local/modules/chanserv/set_topiclock";
|
||||||
loadmodule "chanserv/set_topiclock";
|
loadmodule "/usr/local/modules/chanserv/set_url";
|
||||||
loadmodule "chanserv/set_url";
|
loadmodule "/usr/local/modules/chanserv/set_verbose";
|
||||||
loadmodule "chanserv/set_verbose";
|
loadmodule "/usr/local/modules/chanserv/status";
|
||||||
loadmodule "chanserv/status";
|
loadmodule "/usr/local/modules/chanserv/sync";
|
||||||
loadmodule "chanserv/sync";
|
loadmodule "/usr/local/modules/chanserv/successor_acl";
|
||||||
loadmodule "chanserv/successor_acl";
|
loadmodule "/usr/local/modules/chanserv/taxonomy";
|
||||||
loadmodule "chanserv/taxonomy";
|
loadmodule "/usr/local/modules/chanserv/template";
|
||||||
loadmodule "chanserv/template";
|
loadmodule "/usr/local/modules/chanserv/topic";
|
||||||
loadmodule "chanserv/topic";
|
loadmodule "/usr/local/modules/chanserv/voice";
|
||||||
loadmodule "chanserv/voice";
|
loadmodule "/usr/local/modules/chanserv/why";
|
||||||
loadmodule "chanserv/why";
|
loadmodule "/usr/local/modules/chanserv/xop";
|
||||||
loadmodule "chanserv/xop";
|
loadmodule "/usr/local/modules/chanserv/antiflood";
|
||||||
loadmodule "chanserv/antiflood";
|
loadmodule "/usr/local/modules/chanfix/main";
|
||||||
loadmodule "chanfix/main";
|
loadmodule "/usr/local/modules/operserv/akill";
|
||||||
loadmodule "operserv/akill";
|
loadmodule "/usr/local/modules/operserv/clearchan";
|
||||||
loadmodule "operserv/clearchan";
|
loadmodule "/usr/local/modules/operserv/clones";
|
||||||
loadmodule "operserv/clones";
|
loadmodule "/usr/local/modules/operserv/compare";
|
||||||
loadmodule "operserv/compare";
|
loadmodule "/usr/local/modules/operserv/genhash";
|
||||||
loadmodule "operserv/genhash";
|
loadmodule "/usr/local/modules/operserv/greplog";
|
||||||
loadmodule "operserv/greplog";
|
loadmodule "/usr/local/modules/operserv/help";
|
||||||
loadmodule "operserv/help";
|
loadmodule "/usr/local/modules/operserv/identify";
|
||||||
loadmodule "operserv/identify";
|
loadmodule "/usr/local/modules/operserv/ignore";
|
||||||
loadmodule "operserv/ignore";
|
loadmodule "/usr/local/modules/operserv/info";
|
||||||
loadmodule "operserv/info";
|
loadmodule "/usr/local/modules/operserv/joinrate";
|
||||||
loadmodule "operserv/joinrate";
|
loadmodule "/usr/local/modules/operserv/jupe";
|
||||||
loadmodule "operserv/jupe";
|
loadmodule "/usr/local/modules/operserv/mode";
|
||||||
loadmodule "operserv/mode";
|
loadmodule "/usr/local/modules/operserv/modlist";
|
||||||
loadmodule "operserv/modlist";
|
loadmodule "/usr/local/modules/operserv/modmanager";
|
||||||
loadmodule "operserv/modmanager";
|
loadmodule "/usr/local/modules/operserv/noop";
|
||||||
loadmodule "operserv/noop";
|
loadmodule "/usr/local/modules/operserv/rakill";
|
||||||
loadmodule "operserv/rakill";
|
loadmodule "/usr/local/modules/operserv/readonly";
|
||||||
loadmodule "operserv/readonly";
|
loadmodule "/usr/local/modules/operserv/rehash";
|
||||||
loadmodule "operserv/rehash";
|
loadmodule "/usr/local/modules/operserv/restart";
|
||||||
loadmodule "operserv/restart";
|
loadmodule "/usr/local/modules/operserv/rmatch";
|
||||||
loadmodule "operserv/rmatch";
|
loadmodule "/usr/local/modules/operserv/rnc";
|
||||||
loadmodule "operserv/rnc";
|
loadmodule "/usr/local/modules/operserv/rwatch";
|
||||||
loadmodule "operserv/rwatch";
|
loadmodule "/usr/local/modules/operserv/set";
|
||||||
loadmodule "operserv/set";
|
loadmodule "/usr/local/modules/operserv/sgline";
|
||||||
loadmodule "operserv/sgline";
|
loadmodule "/usr/local/modules/operserv/shutdown";
|
||||||
loadmodule "operserv/shutdown";
|
loadmodule "/usr/local/modules/operserv/soper";
|
||||||
loadmodule "operserv/soper";
|
loadmodule "/usr/local/modules/operserv/specs";
|
||||||
loadmodule "operserv/specs";
|
loadmodule "/usr/local/modules/operserv/sqline";
|
||||||
loadmodule "operserv/sqline";
|
loadmodule "/usr/local/modules/operserv/update";
|
||||||
loadmodule "operserv/update";
|
loadmodule "/usr/local/modules/operserv/uptime";
|
||||||
loadmodule "operserv/uptime";
|
loadmodule "/usr/local/modules/memoserv/help";
|
||||||
loadmodule "memoserv/help";
|
loadmodule "/usr/local/modules/memoserv/send";
|
||||||
loadmodule "memoserv/send";
|
loadmodule "/usr/local/modules/memoserv/sendops";
|
||||||
loadmodule "memoserv/sendops";
|
loadmodule "/usr/local/modules/memoserv/sendgroup";
|
||||||
loadmodule "memoserv/sendgroup";
|
loadmodule "/usr/local/modules/memoserv/list";
|
||||||
loadmodule "memoserv/list";
|
loadmodule "/usr/local/modules/memoserv/read";
|
||||||
loadmodule "memoserv/read";
|
loadmodule "/usr/local/modules/memoserv/forward";
|
||||||
loadmodule "memoserv/forward";
|
loadmodule "/usr/local/modules/memoserv/delete";
|
||||||
loadmodule "memoserv/delete";
|
loadmodule "/usr/local/modules/memoserv/ignore";
|
||||||
loadmodule "memoserv/ignore";
|
loadmodule "/usr/local/modules/global/main";
|
||||||
loadmodule "global/main";
|
loadmodule "/usr/local/modules/infoserv/main";
|
||||||
loadmodule "infoserv/main";
|
loadmodule "/usr/local/modules/saslserv/authcookie";
|
||||||
loadmodule "saslserv/authcookie";
|
loadmodule "/usr/local/modules/saslserv/ecdh-x25519-challenge";
|
||||||
loadmodule "saslserv/ecdh-x25519-challenge";
|
loadmodule "/usr/local/modules/saslserv/ecdsa-nist256p-challenge";
|
||||||
loadmodule "saslserv/ecdsa-nist256p-challenge";
|
loadmodule "/usr/local/modules/saslserv/external";
|
||||||
loadmodule "saslserv/external";
|
loadmodule "/usr/local/modules/saslserv/plain";
|
||||||
loadmodule "saslserv/plain";
|
loadmodule "/usr/local/modules/saslserv/scram";
|
||||||
loadmodule "saslserv/scram";
|
loadmodule "/usr/local/modules/gameserv/dice";
|
||||||
loadmodule "gameserv/dice";
|
loadmodule "/usr/local/modules/gameserv/eightball";
|
||||||
loadmodule "gameserv/eightball";
|
loadmodule "/usr/local/modules/gameserv/gamecalc";
|
||||||
loadmodule "gameserv/gamecalc";
|
loadmodule "/usr/local/modules/gameserv/help";
|
||||||
loadmodule "gameserv/help";
|
loadmodule "/usr/local/modules/gameserv/lottery";
|
||||||
loadmodule "gameserv/lottery";
|
loadmodule "/usr/local/modules/gameserv/namegen";
|
||||||
loadmodule "gameserv/namegen";
|
loadmodule "/usr/local/modules/gameserv/rps";
|
||||||
loadmodule "gameserv/rps";
|
loadmodule "/usr/local/modules/rpgserv/enable";
|
||||||
loadmodule "rpgserv/enable";
|
loadmodule "/usr/local/modules/rpgserv/help";
|
||||||
loadmodule "rpgserv/help";
|
loadmodule "/usr/local/modules/rpgserv/info";
|
||||||
loadmodule "rpgserv/info";
|
loadmodule "/usr/local/modules/rpgserv/list";
|
||||||
loadmodule "rpgserv/list";
|
loadmodule "/usr/local/modules/rpgserv/search";
|
||||||
loadmodule "rpgserv/search";
|
loadmodule "/usr/local/modules/rpgserv/set";
|
||||||
loadmodule "rpgserv/set";
|
loadmodule "/usr/local/modules/botserv/main";
|
||||||
loadmodule "botserv/main";
|
loadmodule "/usr/local/modules/botserv/help";
|
||||||
loadmodule "botserv/help";
|
loadmodule "/usr/local/modules/botserv/info";
|
||||||
loadmodule "botserv/info";
|
loadmodule "/usr/local/modules/botserv/bottalk";
|
||||||
loadmodule "botserv/bottalk";
|
loadmodule "/usr/local/modules/botserv/set_fantasy";
|
||||||
loadmodule "botserv/set_fantasy";
|
loadmodule "/usr/local/modules/botserv/set_nobot";
|
||||||
loadmodule "botserv/set_nobot";
|
loadmodule "/usr/local/modules/botserv/set_private";
|
||||||
loadmodule "botserv/set_private";
|
loadmodule "/usr/local/modules/botserv/set_saycaller";
|
||||||
loadmodule "botserv/set_saycaller";
|
loadmodule "/usr/local/modules/hostserv/help";
|
||||||
loadmodule "hostserv/help";
|
loadmodule "/usr/local/modules/hostserv/onoff";
|
||||||
loadmodule "hostserv/onoff";
|
loadmodule "/usr/local/modules/hostserv/offer";
|
||||||
loadmodule "hostserv/offer";
|
loadmodule "/usr/local/modules/hostserv/request";
|
||||||
loadmodule "hostserv/request";
|
loadmodule "/usr/local/modules/hostserv/vhost";
|
||||||
loadmodule "hostserv/vhost";
|
loadmodule "/usr/local/modules/hostserv/vhostnick";
|
||||||
loadmodule "hostserv/vhostnick";
|
loadmodule "/usr/local/modules/hostserv/group";
|
||||||
loadmodule "hostserv/group";
|
loadmodule "/usr/local/modules/hostserv/drop";
|
||||||
loadmodule "hostserv/drop";
|
loadmodule "/usr/local/modules/helpserv/helpme";
|
||||||
loadmodule "helpserv/helpme";
|
loadmodule "/usr/local/modules/helpserv/ticket";
|
||||||
loadmodule "helpserv/ticket";
|
loadmodule "/usr/local/modules/helpserv/services";
|
||||||
loadmodule "helpserv/services";
|
loadmodule "/usr/local/modules/alis/main";
|
||||||
loadmodule "alis/main";
|
loadmodule "/usr/local/modules/statserv/channel";
|
||||||
loadmodule "statserv/channel";
|
loadmodule "/usr/local/modules/statserv/netsplit";
|
||||||
loadmodule "statserv/netsplit";
|
loadmodule "/usr/local/modules/statserv/server";
|
||||||
loadmodule "statserv/server";
|
loadmodule "/usr/local/modules/groupserv/main";
|
||||||
loadmodule "groupserv/main";
|
loadmodule "/usr/local/modules/groupserv/acsnolimit";
|
||||||
loadmodule "groupserv/acsnolimit";
|
loadmodule "/usr/local/modules/groupserv/drop";
|
||||||
loadmodule "groupserv/drop";
|
loadmodule "/usr/local/modules/groupserv/fflags";
|
||||||
loadmodule "groupserv/fflags";
|
loadmodule "/usr/local/modules/groupserv/flags";
|
||||||
loadmodule "groupserv/flags";
|
loadmodule "/usr/local/modules/groupserv/help";
|
||||||
loadmodule "groupserv/help";
|
loadmodule "/usr/local/modules/groupserv/info";
|
||||||
loadmodule "groupserv/info";
|
loadmodule "/usr/local/modules/groupserv/join";
|
||||||
loadmodule "groupserv/join";
|
loadmodule "/usr/local/modules/groupserv/list";
|
||||||
loadmodule "groupserv/list";
|
loadmodule "/usr/local/modules/groupserv/listchans";
|
||||||
loadmodule "groupserv/listchans";
|
loadmodule "/usr/local/modules/groupserv/register";
|
||||||
loadmodule "groupserv/register";
|
loadmodule "/usr/local/modules/groupserv/regnolimit";
|
||||||
loadmodule "groupserv/regnolimit";
|
loadmodule "/usr/local/modules/groupserv/invite";
|
||||||
loadmodule "groupserv/invite";
|
loadmodule "/usr/local/modules/groupserv/set";
|
||||||
loadmodule "groupserv/set";
|
loadmodule "/usr/local/modules/groupserv/set_channel";
|
||||||
loadmodule "groupserv/set_channel";
|
loadmodule "/usr/local/modules/groupserv/set_description";
|
||||||
loadmodule "groupserv/set_description";
|
loadmodule "/usr/local/modules/groupserv/set_email";
|
||||||
loadmodule "groupserv/set_email";
|
loadmodule "/usr/local/modules/groupserv/set_groupname";
|
||||||
loadmodule "groupserv/set_groupname";
|
loadmodule "/usr/local/modules/groupserv/set_joinflags";
|
||||||
loadmodule "groupserv/set_joinflags";
|
loadmodule "/usr/local/modules/groupserv/set_open";
|
||||||
loadmodule "groupserv/set_open";
|
loadmodule "/usr/local/modules/groupserv/set_public";
|
||||||
loadmodule "groupserv/set_public";
|
loadmodule "/usr/local/modules/groupserv/set_url";
|
||||||
loadmodule "groupserv/set_url";
|
#loadmodule "/usr/local/modules/misc/httpd";
|
||||||
#loadmodule "misc/httpd";
|
#loadmodule "/usr/local/modules/misc/login_throttling";
|
||||||
#loadmodule "misc/login_throttling";
|
#loadmodule "/usr/local/modules/transport/xmlrpc";
|
||||||
#loadmodule "transport/xmlrpc";
|
#loadmodule "/usr/local/modules/exttarget/oper";
|
||||||
#loadmodule "exttarget/oper";
|
#loadmodule "/usr/local/modules/exttarget/registered";
|
||||||
#loadmodule "exttarget/registered";
|
#loadmodule "/usr/local/modules/exttarget/channel";
|
||||||
#loadmodule "exttarget/channel";
|
#loadmodule "/usr/local/modules/exttarget/chanacs";
|
||||||
#loadmodule "exttarget/chanacs";
|
#loadmodule "/usr/local/modules/exttarget/server";
|
||||||
#loadmodule "exttarget/server";
|
#loadmodule "/usr/local/modules/proxyscan/dnsbl";
|
||||||
#loadmodule "proxyscan/dnsbl";
|
|
||||||
|
|
||||||
crypto {
|
crypto {
|
||||||
# argon2_type = "argon2id";
|
# argon2_type = "argon2id";
|
||||||
@ -281,8 +281,8 @@ crypto {
|
|||||||
nickserv {
|
nickserv {
|
||||||
|
|
||||||
nick = "NICKSERV";
|
nick = "NICKSERV";
|
||||||
user = "NICKSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Nickname Services";
|
real = "Nickname Services";
|
||||||
spam;
|
spam;
|
||||||
no_nick_ownership;
|
no_nick_ownership;
|
||||||
@ -302,8 +302,8 @@ nickserv {
|
|||||||
chanserv {
|
chanserv {
|
||||||
|
|
||||||
nick = "CHANSERV";
|
nick = "CHANSERV";
|
||||||
user = "CHANSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Channel Services";
|
real = "Channel Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -346,8 +346,8 @@ chanserv {
|
|||||||
chanfix {
|
chanfix {
|
||||||
|
|
||||||
nick = "CHANFIX";
|
nick = "CHANFIX";
|
||||||
user = "CHANFIX";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Channel Fixing Service";
|
real = "Channel Fixing Service";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -362,8 +362,8 @@ chanfix {
|
|||||||
global {
|
global {
|
||||||
|
|
||||||
nick = "GLOBAL";
|
nick = "GLOBAL";
|
||||||
user = "GLOBAL";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Network Announcements";
|
real = "Network Announcements";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -376,8 +376,8 @@ global {
|
|||||||
infoserv {
|
infoserv {
|
||||||
|
|
||||||
nick = "INFOSERV";
|
nick = "INFOSERV";
|
||||||
user = "INFOSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Information Service";
|
real = "Information Service";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -394,8 +394,8 @@ infoserv {
|
|||||||
operserv {
|
operserv {
|
||||||
|
|
||||||
nick = "OPERSERV";
|
nick = "OPERSERV";
|
||||||
user = "OPERSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Operator Services";
|
real = "Operator Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -410,8 +410,8 @@ operserv {
|
|||||||
saslserv {
|
saslserv {
|
||||||
|
|
||||||
nick = "SASLSERV";
|
nick = "SASLSERV";
|
||||||
user = "SASLSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "SASL Authentication Agent";
|
real = "SASL Authentication Agent";
|
||||||
hide_server_names;
|
hide_server_names;
|
||||||
};
|
};
|
||||||
@ -419,8 +419,8 @@ saslserv {
|
|||||||
memoserv {
|
memoserv {
|
||||||
|
|
||||||
nick = "MEMOSERV";
|
nick = "MEMOSERV";
|
||||||
user = "MEMOSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Memo Services";
|
real = "Memo Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -435,8 +435,8 @@ memoserv {
|
|||||||
gameserv {
|
gameserv {
|
||||||
|
|
||||||
nick = "GAMESERV";
|
nick = "GAMESERV";
|
||||||
user = "GAMESERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Game Services";
|
real = "Game Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -449,8 +449,8 @@ gameserv {
|
|||||||
rpgserv {
|
rpgserv {
|
||||||
|
|
||||||
nick = "RPGSERV";
|
nick = "RPGSERV";
|
||||||
user = "RPGSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "RPG Finding Services";
|
real = "RPG Finding Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -463,8 +463,8 @@ rpgserv {
|
|||||||
botserv {
|
botserv {
|
||||||
|
|
||||||
nick = "BOTSERV";
|
nick = "BOTSERV";
|
||||||
user = "BOTSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Bot Services";
|
real = "Bot Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -479,8 +479,8 @@ botserv {
|
|||||||
groupserv {
|
groupserv {
|
||||||
|
|
||||||
nick = "GROUPSERV";
|
nick = "GROUPSERV";
|
||||||
user = "GROUPSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Group Management Services";
|
real = "Group Management Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -498,8 +498,8 @@ groupserv {
|
|||||||
hostserv {
|
hostserv {
|
||||||
|
|
||||||
nick = "HOSTSERV";
|
nick = "HOSTSERV";
|
||||||
user = "HOSTSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Host Management Services";
|
real = "Host Management Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -518,8 +518,8 @@ hostserv {
|
|||||||
helpserv {
|
helpserv {
|
||||||
|
|
||||||
nick = "HELPSERV";
|
nick = "HELPSERV";
|
||||||
user = "HELPSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Help Services";
|
real = "Help Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -532,8 +532,8 @@ helpserv {
|
|||||||
statserv {
|
statserv {
|
||||||
|
|
||||||
nick = "STATSERV";
|
nick = "STATSERV";
|
||||||
user = "STATSERV";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Statistics Services";
|
real = "Statistics Services";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -546,8 +546,8 @@ statserv {
|
|||||||
alis {
|
alis {
|
||||||
|
|
||||||
nick = "ALIS";
|
nick = "ALIS";
|
||||||
user = "ALIS";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Channel Directory";
|
real = "Channel Directory";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
@ -562,8 +562,8 @@ alis {
|
|||||||
proxyscan {
|
proxyscan {
|
||||||
|
|
||||||
nick = "PROXYSCAN";
|
nick = "PROXYSCAN";
|
||||||
user = "PROXYSCAN";
|
user = "_";
|
||||||
host = "services/-";
|
host = "services/SuperNETs";
|
||||||
real = "Proxyscan Service";
|
real = "Proxyscan Service";
|
||||||
|
|
||||||
aliases {
|
aliases {
|
||||||
|
@ -1 +0,0 @@
|
|||||||
SERVER_NAME="services.lame-network.local"
|
|
@ -9,8 +9,8 @@ services:
|
|||||||
env_file: "config.env"
|
env_file: "config.env"
|
||||||
volumes:
|
volumes:
|
||||||
- data:/etc/atheme
|
- data:/etc/atheme
|
||||||
- ./include.conf:/etc/atheme/include.conf:ro
|
- ./include.conf:/usr/local/etc/include.conf:ro
|
||||||
- ./atheme.conf:/etc/atheme/atheme.conf:ro
|
- ./atheme.conf:/usr/local/etc/atheme.conf:ro
|
||||||
- ssl:/etc/ssl/atheme
|
- ssl:/etc/ssl/atheme
|
||||||
- log:/var/log/atheme
|
- log:/var/log/atheme
|
||||||
volumes:
|
volumes:
|
||||||
|
1
stunnel/.gitignore
vendored
Normal file
1
stunnel/.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
stunnel.conf
|
11
stunnel/Dockerfile
Normal file
11
stunnel/Dockerfile
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
ARG UBUNTU_VERSION="noble"
|
||||||
|
|
||||||
|
FROM ubuntu:${UBUNTU_VERSION}
|
||||||
|
|
||||||
|
RUN apt -y update
|
||||||
|
|
||||||
|
RUN apt -y install stunnel
|
||||||
|
|
||||||
|
ADD stunnel.conf /etc/stunnel/stunnel.conf
|
||||||
|
|
||||||
|
CMD stunnel
|
20
stunnel/docker-compose.yml
Normal file
20
stunnel/docker-compose.yml
Normal file
@ -0,0 +1,20 @@
|
|||||||
|
services:
|
||||||
|
stunnel:
|
||||||
|
restart: on-failure:3
|
||||||
|
build:
|
||||||
|
context: .
|
||||||
|
image: stunnel
|
||||||
|
network_mode: "host"
|
||||||
|
volumes:
|
||||||
|
- ../custom/ca.crt:/ca.crt:ro
|
||||||
|
- ../custom/server.crt:/server.crt:ro
|
||||||
|
- ../custom/server.key:/server.key:ro
|
||||||
|
- ./stunnel.conf:/etc/stunnel/stunnel.conf:ro
|
||||||
|
ulimits:
|
||||||
|
nofile:
|
||||||
|
soft: "102400"
|
||||||
|
hard: "102400"
|
||||||
|
logging:
|
||||||
|
driver: "json-file"
|
||||||
|
options:
|
||||||
|
max-size: "64k"
|
11
stunnel/stunnel.conf.example
Normal file
11
stunnel/stunnel.conf.example
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
foreground = yes
|
||||||
|
|
||||||
|
[PKI client]
|
||||||
|
client = yes
|
||||||
|
accept = 127.0.0.1:6000
|
||||||
|
connect = 1.2.3.4:7777
|
||||||
|
verifyChain = yes
|
||||||
|
CAfile = /ca.crt
|
||||||
|
cert = /server.crt
|
||||||
|
key = /server.key
|
||||||
|
checkHost = hub.lame-network.local
|
Loading…
Reference in New Issue
Block a user